$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/9238c788-3440-3868-8f50-60ef4c2a437d.roa File: 9238c788-3440-3868-8f50-60ef4c2a437d.roa (raw, json) Hash identifier: lvi0XU7pY1AuNBcB9qMwWdYdPbUOouwFV6tS7JPARH0= Subject key identifier: FF:63:6E:FC:27:2D:93:0E:1A:07:63:6B:B9:67:21:25:7E:F4:23:AD Certificate issuer: /CN=3daec053-17f8-47be-a17c-d2007ce5700c Certificate serial: 010D0C9F4328584B970CF5D3073C8EFF7DF76200 Authority key identifier: EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/9238c788-3440-3868-8f50-60ef4c2a437d.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 23278 IP address blocks: 167.253.144.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0c:f5:d3:07:3c:8e:ff:7d:f7:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3daec053-17f8-47be-a17c-d2007ce5700c Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=5d77ee2c-9045-40e5-933b-e0a6a618a50f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0e:b8:44:aa:37:a8:e7:8d:34:91:f8:0b:7e: aa:cb:8e:21:b7:e3:83:09:3a:62:fd:84:ca:88:7f: 70:a2:4f:01:ad:c5:b5:8b:1d:b6:42:c6:1f:ad:8d: 3f:18:f3:c7:0a:f7:07:c1:15:b6:5f:63:00:19:28: 58:9a:b1:50:93:87:65:dd:ac:07:54:fa:5f:38:e0: 7d:51:ba:69:d1:4b:38:c5:37:fe:fa:60:55:d9:23: 65:de:13:30:4c:95:b6:ab:06:1e:3f:99:d7:a1:54: 63:9f:0e:66:11:c4:7a:3b:4b:ad:a8:4d:bf:d6:85: 4a:e1:82:e2:0d:cf:95:65:94:73:88:45:c3:ec:c2: 33:de:7e:c1:06:40:e4:eb:c3:ad:9e:de:d3:19:6e: df:53:72:dc:d9:24:3d:a1:45:2a:2e:73:6c:63:7f: 11:27:b2:64:82:da:95:46:06:e3:a1:d0:d5:c1:e1: cc:05:8c:46:26:1f:03:fc:5c:93:e6:d2:6f:fc:73: 63:d8:4c:a8:d2:74:73:2a:75:7b:4a:0f:48:e9:db: 16:4b:54:33:bc:d0:94:05:d7:1a:11:5d:2f:ef:1d: c2:7d:eb:bd:00:2e:e1:12:8e:68:59:fa:c9:9b:cc: 92:d0:83:15:b5:9d:0e:07:f6:d0:a2:54:3d:20:4a: 80:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:63:6E:FC:27:2D:93:0E:1A:07:63:6B:B9:67:21:25:7E:F4:23:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/9238c788-3440-3868-8f50-60ef4c2a437d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c/3daec053-17f8-47be-a17c-d2007ce5700c.crl X509v3 Authority Key Identifier: keyid:EB:1F:65:DD:61:C2:51:D6:C2:94:08:68:B9:B3:43:A9:85:37:B7:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3daec053-17f8-47be-a17c-d2007ce5700c.cer sbgp-ipAddrBlock: critical IPv4: 167.253.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:98:16:67:79:c5:d0:18:91:84:ac:0f:d3:86:94:ab:a9:0f: 38:b8:cc:93:93:74:ef:9c:c8:e2:be:e9:5f:83:57:3f:3b:bf: ba:e7:45:7b:34:4b:9c:de:86:ca:51:b9:90:31:a3:70:f2:37: 99:83:f7:3e:9a:81:71:41:15:eb:94:a9:62:6c:7c:b2:e3:32: 0a:5a:18:8b:12:be:81:a4:64:45:10:e8:67:89:78:fe:e4:fb: 5c:42:7c:b3:02:05:6d:08:42:6e:97:33:ba:66:e6:87:06:6c: 25:66:84:f6:6a:6b:d1:3f:56:a1:af:73:6f:0c:5c:bf:5a:54: 3d:ac:35:0f:2d:12:90:87:1e:73:1c:35:dd:c5:fd:cb:5b:42: 42:7a:a1:0f:ee:e1:e2:ea:d1:6f:32:95:eb:7e:6b:e2:d5:ee: 1b:2c:55:25:32:48:56:2b:ff:5d:9e:94:6b:c0:b0:84:af:0c: 20:f1:2e:9d:f3:70:04:f0:6e:9f:97:d8:b4:a3:29:ec:49:63: 90:91:2e:60:86:83:ea:9b:19:a5:eb:57:ce:79:6d:19:94:d7: 66:ba:eb:25:c9:d1:a9:29:06:82:71:ec:f2:1b:91:09:27:46: ac:47:3c:fe:eb:6c:d4:0b:33:04:ab:b2:ac:a0:42:4b:f6:17: 6c:03:fa:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDPXTBzyO/333YgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RhZWMwNTMtMTdmOC00N2JlLWExN2MtZDIwMDdjZTU3 MDBjMB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NWQ3N2VlMmMtOTA0NS00MGU1LTkzM2ItZTBhNmE2MThhNTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAww64RKo3qOeNNJH4C36qy44ht+ODCTpi/YTK iH9wok8BrcW1ix22QsYfrY0/GPPHCvcHwRW2X2MAGShYmrFQk4dl3awHVPpfOOB9 Ubpp0Us4xTf++mBV2SNl3hMwTJW2qwYeP5nXoVRjnw5mEcR6O0utqE2/1oVK4YLi Dc+VZZRziEXD7MIz3n7BBkDk68Otnt7TGW7fU3Lc2SQ9oUUqLnNsY38RJ7JkgtqV RgbjodDVweHMBYxGJh8D/FyT5tJv/HNj2Eyo0nRzKnV7Sg9I6dsWS1QzvNCUBdca EV0v7x3Cfeu9AC7hEo5oWfrJm8yS0IMVtZ0OB/bQolQ9IEqADwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9jbvwnLZMOGgdja7lnISV+9COtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zZGFl YzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAwN2NlNTcwMGMvOTIzOGM3ODgtMzQ0MC0z ODY4LThmNTAtNjBlZjRjMmE0MzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2RhZWMwNTMtMTdmOC00N2JlLWEx N2MtZDIwMDdjZTU3MDBjLzNkYWVjMDUzLTE3ZjgtNDdiZS1hMTdjLWQyMDA3Y2U1 NzAwYy5jcmwwHwYDVR0jBBgwFoAU6x9l3WHCUdbClAhoubNDqYU3t44wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zZGFlYzA1My0xN2Y4LTQ3YmUtYTE3Yy1kMjAw N2NlNTcwMGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCp/2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqYFmd5xdAYkYSsD9OGlKupDzi4zJOTdO+cyOK+6V+DVz87v7rnRXs0 S5zehspRuZAxo3DyN5mD9z6agXFBFeuUqWJsfLLjMgpaGIsSvoGkZEUQ6GeJeP7k +1xCfLMCBW0IQm6XM7pm5ocGbCVmhPZqa9E/VqGvc28MXL9aVD2sNQ8tEpCHHnMc Nd3F/ctbQkJ6oQ/u4eLq0W8ylet+a+LV7hssVSUySFYr/12elGvAsISvDCDxLp3z cATwbp+X2LSjKexJY5CRLmCGg+qbGaXrV855bRmU12a66yXJ0akpBoJx7PIbkQkn RqxHPP7rbNQLMwSrsqygQkv2F2wD+pE= -----END CERTIFICATE-----Generated at Sun Nov 2 22:56:45 2025 by rpki-client